Docker Security Scanner Update

바이브코딩으로 만든 DSS가 업데이트 됐습니다.

Trivy 업데이트로 인해 스캔 결과가 대시보드에 뜨지 않던 문제가 해결되었습니다

Postgres DB 취약점 해결을 위해 zlib 취약점을 apt upgrade를 root 권한으로 실행하여 해결한 후 다시 일반 사용자 권한으로 전환했습니다.

services:
  # PostgreSQL 데이터베이스
  db:
    image: dokkaeb1/scanner-db:latest
    container_name: scanner-db
    restart: always
    environment:
      POSTGRES_DB: ${POSTGRES_DB}
      POSTGRES_USER: ${POSTGRES_USER}
      POSTGRES_PASSWORD: ${POSTGRES_PASSWORD}
      TZ: Asia/Seoul
    volumes:
      - postgres_data:/var/lib/postgresql/data
    healthcheck:
      test: [ "CMD-SHELL", "pg_isready -U ${POSTGRES_USER}" ]
      interval: 10s
      timeout: 5s
      retries: 5
    logging:
      driver: "json-file"
      options:
        max-size: "5m"
        max-file: "3"

  # FastAPI 백엔드
  backend:
    image: dokkaeb1/scanner-backend:latest
    container_name: scanner-backend
    restart: always
    environment:
      DATABASE_URL: ${DATABASE_URL}
      TZ: Asia/Seoul
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock
      - trivy_cache:/root/.cache/trivy
    depends_on:
      db:
        condition: service_healthy
    logging:
      driver: "json-file"
      options:
        max-size: "10m"
        max-file: "5"

  # Next.js 프론트엔드
  frontend:
    image: dokkaeb1/scanner-frontend:latest
    container_name: scanner-frontend
    restart: always
    environment:
      NEXT_PUBLIC_API_URL: http://backend:8000
      NODE_ENV: production
      TZ: Asia/Seoul
    ports:
      - "3000:3000"
    depends_on:
      - backend
    logging:
      driver: "json-file"
      options:
        max-size: "10m"
        max-file: "3"

volumes:
  postgres_data:
  trivy_cache:

 

docker-compose.yml 파일이 수정됐습니다